releasing-zig-with-goreleaser

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill's example GitHub Actions workflow will fetch and execute remote action repositories at CI runtime (e.g., uses: goreleaser/goreleaser-action@v6 which corresponds to https://github.com/goreleaser/goreleaser-action), so external content is fetched and executed and is required for the workflow.